Export Policy Best Practices
On FlashArray, configure NFS export policies with the following settings:
| Setting | Value | Purpose |
|---|---|---|
| NFS Version | NFSv3 | Required: NFSv4 causes ID mapping failures with VME |
| Security |
auth_sys (AUTH_SYS) |
Standard UNIX authentication |
| Root Squash | Disabled (no-root-squash) |
Allow libvirt/KVM root-level access to VM disks |
| Access |
rw (read-write) |
Full read/write for VM storage operations |
| Client Scope | All VME host IPs + VME Manager IP | Ensure every node and the manager can access the export |
Recommended Export Layout
Create separate exports on the Everpure FlashArray for different storage roles:
| Export | Purpose | Client Scope |
|---|---|---|
/VMs
|
VM disk storage (NFS datastore) | All cluster host IPs |
/ISO
|
ISO image repository (NFS file share) | All cluster host IPs + VME Manager IP |
Note:
The VME Manager appliance IP must be included in the export policy for any NFS file shares used for ISO/image storage. NFS datastores are mounted directly by the cluster hosts.